OpenControls Logo

STIG Viewer

NIST 800-53 Rev 5

424 controls available

My Controls0NIST 800-53 Catalog424Collections0
CM-7(5)moderatehigh

Authorized Software — Allow-by-exception

Configuration Management

Control Statement

Identify {{ insert: param, cm-07.05_odp.01 }}; Employ a deny-all, permit-by-exception policy to allow the execution of authorized software programs on the system; and Review and update the list of authorized software programs {{ insert: param, cm-07.05_odp.02 }}.

Discussion

Authorized software programs can be limited to specific versions or from a specific source. To facilitate a comprehensive authorized software process and increase the strength of protection for attacks that bypass application level authorized software, software programs may be decomposed into and monitored at different levels of detail. These levels include applications, application programming interfaces, application modules, scripts, system processes, system services, kernel functions, registries, drivers, and dynamic link libraries. The concept of permitting the execution of authorized software may also be applied to user actions, system ports and protocols, IP addresses/ranges, websites, and MAC addresses. Organizations consider verifying the integrity of authorized software programs using digital signatures, cryptographic checksums, or hash functions. Verification of authorized software can occur either prior to execution or at system startup. The identification of authorized URLs for websites is addressed in [CA-3(5)](#ca-3.5) and [SC-7](#sc-7).

Framework
NIST SP 800-53 Rev 5
Family
Configuration Management
Baselines
moderate, high

Related Frameworks

8 paths across 2 frameworks
NIST 800-1711 mapping
3.4.8
1.00
  • NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI7 mappings
CCI-001772
1.00
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-001773
1.00
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-001774
1.00
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-001775
1.00
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-001776
1.00
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-001777
1.00
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-001778
1.00
  • DISA · 2025-01-23 · disa_cci_list · equivalent

Related STIGs

414 STIGs reach this control through 40 CCIs. Expand a row to see the responsible NICE and O*NET roles.

Operating System — Desktop

8 STIGs
Apple macOS 15 (Sequoia) Security Technical Implementation Guide
12025-05-0547 of 161 findings match
Apple macOS 26 (Tahoe) Security Technical Implementation Guide
V1R22026-02-1147 of 160 findings match
Apple macOS 15 (Sequoia) Security Technical Implementation Guide
V1R72026-02-0646 of 160 findings match
Apple macOS 14 (Sonoma) Security Technical Implementation Guide
22024-12-0444 of 155 findings match
Microsoft Windows 10 Security Technical Implementation Guide
32025-02-2540 of 261 findings match
Microsoft Windows 11 Security Technical Implementation Guide
V2R72026-02-1238 of 262 findings match
Microsoft Windows 11 Security Technical Implementation Guide
22025-05-1538 of 258 findings match
Microsoft Windows 11 Security Technical Implementation Guide
V1R52024-10-151 of 5 findings match

Operating System — Server

44 STIGs
Red Hat Enterprise Linux 10 Security Technical Implementation Guide
V1R12026-03-1157 of 434 findings match
CloudLinux AlmaLinux OS 9 Security Technical Implementation Guide
12025-05-2249 of 445 findings match
IBM AIX 7.x Security Technical Implementation Guide
V3R22026-02-0649 of 283 findings match
IBM AIX 7.x Security Technical Implementation Guide
32024-08-1649 of 283 findings match
Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide
V1R62026-02-2748 of 439 findings match
Oracle Linux 9 Security Technical Implementation Guide
12025-05-0846 of 456 findings match
Red Hat Enterprise Linux 9 Security Technical Implementation Guide
22025-05-1446 of 450 findings match
Red Hat Enterprise Linux 9 Security Technical Implementation Guide
V2R82026-02-0546 of 446 findings match
Show 36 more STIGs in this category →
Oracle Linux 9 Security Technical Implementation Guide
V1R52026-02-1745 of 448 findings match
Red Hat Enterprise Linux 8 Security Technical Implementation Guide
V2R72026-02-0534 of 366 findings match
Red Hat Enterprise Linux 8 Security Technical Implementation Guide
22025-05-1434 of 369 findings match
Oracle Linux 8 Security Technical Implementation Guide
22025-05-1330 of 374 findings match
Oracle Linux 8 Security Technical Implementation Guide
V2R82026-02-1330 of 375 findings match
Microsoft Windows Server 2025 Security Technical Implementation Guide
V1R12026-02-2028 of 284 findings match
Microsoft Windows Server 2019 Security Technical Implementation Guide
32025-05-2326 of 275 findings match
Microsoft Windows Server 2019 Security Technical Implementation Guide
V3R82026-02-1226 of 282 findings match
Microsoft Windows Server 2022 Security Technical Implementation Guide
22025-05-1526 of 275 findings match
Microsoft Windows Server 2022 Security Technical Implementation Guide
V2R82026-02-1326 of 282 findings match
Tri-Lab Operating System Stack (TOSS) 4 Security Technical Implementation Guide
V2R52026-02-1912 of 226 findings match
Tri-Lab Operating System Stack (TOSS) 4 Security Technical Implementation Guide
22025-05-0812 of 226 findings match
Amazon Linux 2023 Security Technical Implementation Guide
V1R32026-02-2710 of 187 findings match
Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide
V2R82026-02-065 of 188 findings match
Canonical Ubuntu 24.04 LTS Security Technical Implementation Guide
V1R52026-02-065 of 194 findings match
Cloud Computing Mission Owner Operating System Security Requirements Guide
V1R32025-08-135 of 17 findings match
Cloud Computing Mission Owner Operating System Security Requirements Guide
12024-12-195 of 17 findings match
General Purpose Operating System Security Requirements Guide
32024-12-045 of 198 findings match
General Purpose Operating System Security Requirements Guide
V3R32025-09-225 of 203 findings match
Oracle Linux 7 Security Technical Implementation Guide
32025-05-085 of 243 findings match
Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide
22025-05-164 of 187 findings match
Canonical Ubuntu 24.04 LTS Security Technical Implementation Guide
12025-05-164 of 194 findings match
HPE 3PAR StoreServ 3.3.x Security Technical Implementation Guide
V2R12024-08-274 of 30 findings match
Canonical Ubuntu 20.04 LTS Security Technical Implementation Guide
22025-05-163 of 172 findings match
Solaris 11 SPARC Security Technical Implementation Guide
V3R52026-02-192 of 217 findings match
Solaris 11 SPARC Security Technical Implementation Guide
32025-05-052 of 217 findings match
Solaris 11 X86 Security Technical Implementation Guide
V3R52026-02-192 of 216 findings match
Solaris 11 X86 Security Technical Implementation Guide
32025-05-052 of 216 findings match
SUSE Linux Enterprise Server 12 Security Technical Implementation Guide
32025-05-142 of 211 findings match
SUSE Linux Enterprise Server 15 Security Technical Implementation Guide
V2R72026-02-192 of 214 findings match
SUSE Linux Enterprise Server 15 Security Technical Implementation Guide
22025-05-142 of 216 findings match
HPE 3PAR StoreServ 3.2.x Security Technical Implementation Guide
V2R12021-11-231 of 19 findings match
NetApp ONTAP DSC 9.x Security Technical Implementation Guide
22024-08-221 of 29 findings match
NetApp ONTAP DSC 9.x Security Technical Implementation Guide
V2R32025-12-081 of 29 findings match
SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide
V1R42026-02-101 of 208 findings match
SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide
12025-05-081 of 210 findings match

Operating System — Mainframe

69 STIGs
IBM z/OS ACF2 Security Technical Implementation Guide
92025-06-2416 of 226 findings match
IBM z/OS ACF2 Security Technical Implementation Guide
V9R82026-03-0915 of 225 findings match
IBM z/OS RACF Security Technical Implementation Guide
92025-06-2414 of 224 findings match
IBM z/OS TSS Security Technical Implementation Guide
92025-06-2414 of 231 findings match
IBM z/OS RACF Security Technical Implementation Guide
V9R82026-03-0913 of 222 findings match
IBM z/OS TSS Security Technical Implementation Guide
V9R82026-03-0913 of 230 findings match
CA IDMS Security Technical Implementation Guide
V2R12024-09-135 of 74 findings match
IBM zVM Using CA VM:Secure Security Technical Implementation Guide
V2R22022-08-312 of 77 findings match
Show 61 more STIGs in this category →
z/OS BMC CONTROL-O for ACF2 Security Technical Implementation Guide
V7R22025-09-272 of 7 findings match
z/OS BMC CONTROL-O for ACF2 Security Technical Implementation Guide
72025-02-242 of 7 findings match
z/OS BMC CONTROL-O for RACF Security Technical Implementation Guide
V7R22025-09-272 of 8 findings match
z/OS BMC CONTROL-O for RACF Security Technical Implementation Guide
72025-02-242 of 8 findings match
z/OS BMC CONTROL-O for TSS Security Technical Implementation Guide
V7R22025-09-282 of 9 findings match
z/OS CA 1 Tape Management for ACF2 Security Technical Implementation Guide
V7R22025-09-272 of 9 findings match
z/OS CA 1 Tape Management for ACF2 Security Technical Implementation Guide
72024-12-162 of 9 findings match
z/OS CA 1 Tape Management for RACF Security Technical Implementation Guide
V7R22025-09-272 of 11 findings match
z/OS CA 1 Tape Management for RACF Security Technical Implementation Guide
72024-12-162 of 11 findings match
z/OS CA 1 Tape Management for TSS Security Technical Implementation Guide
V7R22025-09-282 of 11 findings match
z/OS CL/SuperSession for ACF2 Security Technical Implementation Guide
V7R22025-09-272 of 7 findings match
z/OS CL/SuperSession for ACF2 Security Technical Implementation Guide
72024-12-162 of 7 findings match
z/OS CL/SuperSession for RACF Security Technical Implementation Guide
V7R22025-09-272 of 9 findings match
z/OS CL/SuperSession for RACF Security Technical Implementation Guide
72024-12-162 of 9 findings match
z/OS CL/SuperSession for TSS Security Technical Implementation Guide
V7R22025-09-282 of 10 findings match
zOS WebSphere Application Server for TSS Security Technical Implementation Guide
V7R22025-09-282 of 5 findings match
IBM Hardware Management Console (HMC) Security Technical Implementation Guide
V2R12024-06-241 of 35 findings match
Mainframe Product Security Requirements Guide
V3R42025-09-101 of 194 findings match
Mainframe Product Security Requirements Guide
32024-12-051 of 193 findings match
z/OS BMC CONTROL-D for ACF2 Security Technical Implementation Guide
V7R22025-09-261 of 7 findings match
z/OS BMC CONTROL-D for ACF2 Security Technical Implementation Guide
72024-12-161 of 7 findings match
z/OS BMC CONTROL-D for RACF Security Technical Implementation Guide
72024-12-161 of 8 findings match
z/OS BMC CONTROL-D for RACF Security Technical Implementation Guide
V7R22025-09-271 of 8 findings match
z/OS BMC CONTROL-D for TSS Security Technical Implementation Guide
V7R22025-09-281 of 9 findings match
z/OS BMC CONTROL-M for ACF2 Security Technical Implementation Guide
V7R22025-09-261 of 8 findings match
z/OS BMC CONTROL-M for ACF2 Security Technical Implementation Guide
72024-12-161 of 8 findings match
z/OS BMC CONTROL-M for RACF Security Technical Implementation Guide
V7R22025-09-271 of 9 findings match
z/OS BMC CONTROL-M for RACF Security Technical Implementation Guide
72024-12-161 of 9 findings match
z/OS BMC IOA for ACF2 Security Technical Implementation Guide
V7R22025-09-271 of 7 findings match
z/OS BMC IOA for ACF2 Security Technical Implementation Guide
72025-02-241 of 7 findings match
z/OS BMC IOA for RACF Security Technical Implementation Guide
V7R22025-09-271 of 8 findings match
z/OS BMC IOA for RACF Security Technical Implementation Guide
72025-02-241 of 8 findings match
z/OS BMC IOA for TSS Security Technical Implementation Guide
V7R22025-09-281 of 9 findings match
z/OS CA MIM for ACF2 Security Technical Implementation Guide
V7R22025-09-271 of 5 findings match
z/OS CA MIM for ACF2 Security Technical Implementation Guide
72025-02-241 of 5 findings match
z/OS CA MIM for RACF Security Technical Implementation Guide
V7R22025-09-271 of 6 findings match
z/OS CA MIM for RACF Security Technical Implementation Guide
72025-02-241 of 6 findings match
z/OS CA MIM for TSS Security Technical Implementation Guide
V7R22025-09-281 of 6 findings match
z/OS FDR for ACF2 Security Technical Implementation Guide
V7R22025-09-231 of 2 findings match
z/OS FDR for ACF2 Security Technical Implementation Guide
72024-12-161 of 2 findings match
z/OS FDR for RACF Security Technical Implementation Guide
V7R22025-09-271 of 2 findings match
z/OS FDR for RACF Security Technical Implementation Guide
72024-12-161 of 2 findings match
z/OS FDR for TSS Security Technical Implementation Guide
V7R22025-09-281 of 2 findings match
z/OS IBM System Display and Search Facility (SDSF) for ACF2 Security Technical Implementation Guide
V7R22025-09-231 of 7 findings match
z/OS IBM System Display and Search Facility (SDSF) for RACF Security Technical Implementation Guide
V7R22025-09-271 of 8 findings match
z/OS IBM System Display and Search Facility (SDSF) for RACF Security Technical Implementation Guide
72025-02-241 of 8 findings match
z/OS IBM System Display and Search Facility (SDSF) for TSS Security Technical Implementation Guide
V7R22025-09-281 of 7 findings match
z/OS IBM System Display and Search Facility for ACF2 Security Technical Implementation Guide
72025-02-241 of 7 findings match
z/OS TDMF for ACF2 Security Technical Implementation Guide
V7R22025-09-261 of 2 findings match
z/OS TDMF for ACF2 Security Technical Implementation Guide
72024-12-161 of 2 findings match
z/OS TDMF for RACF Security Technical Implementation Guide
V7R22025-09-271 of 2 findings match
z/OS TDMF for RACF Security Technical Implementation Guide
72024-12-161 of 2 findings match
z/OS TDMF for TSS Security Technical Implementation Guide
V7R22025-09-281 of 2 findings match
zOS BMC CONTROL-M for TSS Security Technical Implementation Guide
V7R22025-09-281 of 10 findings match
zOS Websphere Application Server for RACF Security Technical Implementation Guide
V7R22025-09-271 of 5 findings match
zOS Websphere Application Server for RACF Security Technical Implementation Guide
72024-12-161 of 5 findings match
zOS WebSphere MQ for ACF2 Security Technical Implementation Guide
V7R22025-09-271 of 17 findings match
zOS WebSphere MQ for RACF Security Technical Implementation Guide
V7R32025-09-271 of 17 findings match
zOS WebSphere MQ for TSS Security Technical Implementation Guide
V7R22025-09-281 of 17 findings match
zOS WebsphereMQ for ACF2 Security Technical Implementation Guide
72025-02-241 of 17 findings match
zOS WebsphereMQ for RACF Security Technical Implementation Guide
72025-06-241 of 17 findings match

Operating System — Mobile

40 STIGs
Apple iOS/iPadOS 18 Security Technical Implementation Guide
12025-06-307 of 92 findings match
Apple iOS/iPadOS 18 Security Technical Implementation Guide
V2R22025-12-017 of 92 findings match
Apple iOS/iPadOS 26 Security Technical Implementation Guide
V1R22025-12-017 of 92 findings match
Apple visionOS 2 Security Technical Implementation Guide
V1R12025-09-304 of 50 findings match
Apple visionOS 26 Security Technical Implementation Guide
V1R12026-03-104 of 51 findings match
Google Android 14 COBO Security Technical Implementation Guide
V2R42026-02-063 of 38 findings match
Google Android 14 COBO Security Technical Implementation Guide
22024-12-043 of 30 findings match
Google Android 14 COPE Security Technical Implementation Guide
22024-12-043 of 35 findings match
Show 32 more STIGs in this category →
Google Android 14 COPE Security Technical Implementation Guide
V2R42026-02-123 of 43 findings match
Google Android 15 COBO Security Technical Implementation Guide
V1R42026-02-063 of 44 findings match
Google Android 15 COBO Security Technical Implementation Guide
12024-12-053 of 36 findings match
Google Android 15 COPE Security Technical Implementation Guide
V1R42026-02-123 of 47 findings match
Google Android 15 COPE Security Technical Implementation Guide
12024-12-053 of 39 findings match
Google Android 16 COBO Security Technical Implementation Guide
V1R22026-02-063 of 42 findings match
Google Android 16 COPE Security Technical Implementation Guide
V1R22026-02-123 of 45 findings match
Honeywell Android 13 COBO Security Technical Implementation Guide
V1R12025-05-073 of 32 findings match
Honeywell Android 13 COPE Security Technical Implementation Guide
V1R12025-05-073 of 36 findings match
Samsung Android 16 COBO Security Technical Implementation Guide
V1R32026-02-063 of 45 findings match
Samsung Android 16 COPE Security Technical Implementation Guide
V1R22026-02-113 of 48 findings match
Samsung Android OS 14 with Knox 3.x COBO Security Technical Implementation Guide
22024-12-063 of 36 findings match
Samsung Android OS 14 with Knox 3.x COPE Security Technical Implementation Guide
22024-12-063 of 39 findings match
Samsung Android OS 15 with Knox 3.x COBO Security Technical Implementation Guide
12024-12-103 of 37 findings match
Samsung Android OS 15 with Knox 3.x COPE Security Technical Implementation Guide
12024-12-103 of 40 findings match
Zebra Android 13 COBO Security Technical Implementation Guide
V1R12024-12-113 of 31 findings match
Zebra Android 13 COPE Security Technical Implementation Guide
V1R12024-12-113 of 35 findings match
Zebra Technologies Android 14 COBO Security Technical Implementation Guide
V1R12026-02-223 of 38 findings match
Zebra Technologies Android 14 COPE Security Technical Implementation Guide
V1R12026-02-223 of 43 findings match
Google Android 13 COBO Security Technical Implementation Guide
22024-12-042 of 31 findings match
Google Android 13 COPE Security Technical Implementation Guide
22024-12-042 of 36 findings match
Google Android 13 MDFPP 3.3 BYOAD Security Technical Implementation Guide
12023-09-192 of 14 findings match
Google Android 14 BYOAD Security Technical Implementation Guide
V1R12024-02-162 of 14 findings match
Samsung Android 14 BYOAD Security Technical Implementation Guide
12024-02-162 of 14 findings match
Samsung Android 15 BYOAD Security Technical Implementation Guide
12025-04-292 of 14 findings match
Samsung Android OS 13 with Knox 3.x COBO Security Technical Implementation Guide
22024-12-062 of 30 findings match
Samsung Android OS 13 with Knox 3.x COPE Security Technical Implementation Guide
22024-12-062 of 30 findings match
Google Android 13 BYOAD Security Technical Implementation Guide
12024-02-061 of 23 findings match
Google Android 14 MDFPP 3.3 BYOAD Security Technical Implementation Guide
V1R22025-08-191 of 23 findings match
Google Android 14 MDFPP 3.3 BYOAD Security Technical Implementation Guide
12024-02-201 of 23 findings match
Samsung Android 14 MDFPP 3.3 BYOAD Security Technical Implementation Guide
12024-02-211 of 25 findings match
Samsung Android 15 MDFPP 3.3 BYOAD Security Technical Implementation Guide
12025-04-291 of 26 findings match

Network Device

97 STIGs
Juniper SRX Services Gateway NDM Security Technical Implementation Guide
V3R32024-12-208 of 68 findings match
Juniper SRX Services Gateway ALG Security Technical Implementation Guide
V3R32024-12-195 of 24 findings match
Palo Alto Networks Prisma Cloud Compute Security Technical Implementation Guide
V2R32026-02-135 of 31 findings match
Palo Alto Networks Prisma Cloud Compute Security Technical Implementation Guide
22024-12-065 of 31 findings match
AAA Services Security Requirements Guide
V2R22024-12-044 of 77 findings match
Palo Alto Networks ALG Security Technical Implementation Guide
V3R42025-03-124 of 50 findings match
Riverbed NetIM OS Security Technical Implementation Guide
V1R12025-10-024 of 154 findings match
Virtual Private Network (VPN) Security Requirements Guide
V3R42025-09-104 of 92 findings match
Show 89 more STIGs in this category →
Virtual Private Network (VPN) Security Requirements Guide
32024-12-194 of 82 findings match
Application Layer Gateway Security Requirements Guide
22024-12-043 of 155 findings match
Application Layer Gateway Security Requirements Guide
V2R32025-09-153 of 160 findings match
HPE Nimble Storage Array NDM Security Technical Implementation Guide
V2R12024-06-203 of 20 findings match
Juniper SRX Services Gateway VPN Security Technical Implementation Guide
V3R22024-12-203 of 28 findings match
Symantec ProxySG ALG Security Technical Implementation Guide
V1R32020-03-273 of 66 findings match
Cisco ACI NDM Security Technical Implementation Guide
V1R22025-12-112 of 26 findings match
Cisco ACI NDM Security Technical Implementation Guide
12025-06-132 of 26 findings match
Cisco ISE NDM Security Technical Implementation Guide
V2R32025-12-112 of 53 findings match
Cisco ISE NDM Security Technical Implementation Guide
22024-09-102 of 53 findings match
Dell OS10 Switch NDM Security Technical Implementation Guide
V1R12024-12-112 of 39 findings match
Domain Name System (DNS) Security Requirements Guide
V4R22025-12-192 of 119 findings match
Enterprise Voice, Video, and Messaging Endpoint Security Requirements Guide
V1R32025-10-012 of 47 findings match
Enterprise Voice, Video, and Messaging Endpoint Security Requirements Guide
12024-08-022 of 47 findings match
Enterprise Voice, Video, and Messaging Session Management Security Requirements Guide
V1R22025-12-302 of 60 findings match
Enterprise Voice, Video, and Messaging Session Management Security Requirements Guide
12024-03-112 of 61 findings match
F5 NGINX Security Technical Implementation Guide
V1R12026-01-072 of 32 findings match
HPE Aruba Networking AOS VPN Security Technical Implementation Guide
V1R12024-10-292 of 21 findings match
Infoblox 7.x DNS Security Technical Implementation Guide
22020-12-102 of 67 findings match
Arista MLS EOS 4.X NDM Security Technical Implementation Guide
V2R22025-02-201 of 21 findings match
Arista MLS EOS 4.X Router Security Technical Implementation Guide
V2R22025-02-201 of 75 findings match
BIND 9.x Security Technical Implementation Guide
V3R22026-02-251 of 73 findings match
BIND 9.x Security Technical Implementation Guide
22024-02-151 of 70 findings match
Cisco ASA Firewall Security Technical Implementation Guide
V2R12024-06-061 of 21 findings match
Cisco ASA NDM Security Technical Implementation Guide
V2R42025-12-081 of 47 findings match
Cisco ASA NDM Security Technical Implementation Guide
22025-05-191 of 47 findings match
Cisco ASA VPN Security Technical Implementation Guide
V2R22024-08-221 of 41 findings match
Cisco IOS Router NDM Security Technical Implementation Guide
V3R72026-02-251 of 43 findings match
Cisco IOS Router NDM Security Technical Implementation Guide
32025-05-191 of 43 findings match
Cisco IOS Switch NDM Security Technical Implementation Guide
V3R72026-02-251 of 43 findings match
Cisco IOS Switch NDM Security Technical Implementation Guide
32025-05-191 of 43 findings match
Cisco IOS XE Router NDM Security Technical Implementation Guide
V3R72026-02-111 of 42 findings match
Cisco IOS XE Router NDM Security Technical Implementation Guide
32025-05-161 of 42 findings match
Cisco IOS XE Switch NDM Security Technical Implementation Guide
V3R62026-03-041 of 42 findings match
Cisco IOS XE Switch NDM Security Technical Implementation Guide
32025-05-191 of 42 findings match
Cisco IOS XR Router NDM Security Technical Implementation Guide
32025-05-191 of 27 findings match
Cisco IOS XR Router NDM Security Technical Implementation Guide
V3R62026-02-261 of 27 findings match
Cisco IOS XR Router RTR Security Technical Implementation Guide
V3R32025-08-191 of 96 findings match
Cisco IOS XR Router RTR Security Technical Implementation Guide
32024-08-221 of 96 findings match
Cisco NX OS Switch NDM Security Technical Implementation Guide
V3R22024-09-101 of 42 findings match
Cisco NX OS Switch NDM Security Technical Implementation Guide
32025-05-191 of 42 findings match
Domain Name System (DNS) Security Requirements Guide
42024-07-021 of 118 findings match
F5 BIG-IP TMOS ALG Security Technical Implementation Guide
V1R22025-06-091 of 37 findings match
F5 BIG-IP TMOS NDM Security Technical Implementation Guide
V1R22025-06-121 of 29 findings match
F5 BIG-IP TMOS VPN Security Technical Implementation Guide
V1R12024-09-091 of 12 findings match
Firewall Security Requirements Guide
V3R32025-09-221 of 35 findings match
Firewall Security Requirements Guide
32024-12-041 of 34 findings match
Fortinet FortiGate Firewall NDM Security Technical Implementation Guide
V1R52025-11-191 of 60 findings match
Fortinet FortiGate Firewall NDM Security Technical Implementation Guide
12023-06-011 of 60 findings match
Fortinet FortiGate Firewall Security Technical Implementation Guide
12022-09-121 of 29 findings match
Fortinet FortiGate Firewall Security Technical Implementation Guide
V1R42025-11-191 of 29 findings match
HP FlexFabric Switch L2S Security Technical Implementation Guide
V1R32020-06-031 of 22 findings match
HP FlexFabric Switch NDM Security Technical Implementation Guide
V1R42025-06-121 of 79 findings match
HP FlexFabric Switch RTR Security Technical Implementation Guide
V1R22020-06-031 of 21 findings match
HPE Alletra Storage ArcusOS Network Device Management Security Technical Implementation Guide
V1R12026-03-031 of 19 findings match
HPE Aruba Networking AOS NDM Security Technical Implementation Guide
V1R12024-10-291 of 37 findings match
HPE Aruba Networking AOS Wireless Security Technical Implementation Guide
12024-10-291 of 14 findings match
HPE Aruba Networking AOS Wireless Security Technical Implementation Guide
V1R22026-02-251 of 14 findings match
IBM DataPower ALG Security Technical Implementation Guide
V1R12016-01-211 of 65 findings match
IBM DataPower Network Device Management Security Technical Implementation Guide
V1R22017-10-051 of 64 findings match
Infoblox 8.x DNS Security Technical Implementation Guide
V1R22025-03-111 of 71 findings match
Juniper EX Series Switches Layer 2 Switch Security Technical Implementation Guide
V2R42025-12-101 of 24 findings match
Juniper EX Series Switches Layer 2 Switch Security Technical Implementation Guide
22025-03-071 of 24 findings match
Juniper EX Series Switches Network Device Management Security Technical Implementation Guide
V2R42025-12-101 of 56 findings match
Juniper EX Series Switches Network Device Management Security Technical Implementation Guide
22025-03-071 of 56 findings match
Juniper EX Series Switches Router Security Technical Implementation Guide
V2R12024-06-101 of 102 findings match
Juniper Router NDM Security Technical Implementation Guide
V3R22024-12-051 of 49 findings match
Juniper Router RTR Security Technical Implementation Guide
V3R22024-12-051 of 96 findings match
Layer 2 Switch Security Requirements Guide
V3R42026-02-121 of 36 findings match
Layer 2 Switch Security Requirements Guide
32025-03-051 of 28 findings match
Network Device Management Security Requirements Guide
V5R32025-02-111 of 104 findings match
Network Device Management Security Requirements Guide
V5R42025-09-101 of 105 findings match
Network WLAN AP-IG Management Security Technical Implementation Guide
V7R22023-09-131 of 19 findings match
Network WLAN AP-NIPR Management Security Technical Implementation Guide
V7R22023-09-131 of 18 findings match
Network WLAN Bridge Management Security Technical Implementation Guide
V7R22023-09-131 of 18 findings match
Network WLAN Controller Management Security Technical Implementation Guide
V7R22023-09-181 of 18 findings match
Palo Alto Networks NDM Security Technical Implementation Guide
V3R32025-03-121 of 34 findings match
Riverbed NetProfiler Security Technical Implementation Guide
V2R12024-08-271 of 25 findings match
Router Security Requirements Guide
V5R22025-09-101 of 123 findings match
Router Security Requirements Guide
52024-05-281 of 108 findings match
RUCKUS ICX Layer 2 Switch Security Technical Implementation Guide
V1R12025-06-031 of 24 findings match
RUCKUS ICX NDM Security Technical Implementation Guide
V1R12025-05-281 of 25 findings match
SDN Controller Security Requirements Guide
22024-05-281 of 34 findings match
SEL-2740S L2S Security Technical Implementation Guide
V1R12019-05-061 of 13 findings match
Symantec Edge SWG ALG Security Technical Implementation Guide
V1R12025-12-161 of 15 findings match
Symantec Edge SWG NDM Security Technical Implementation Guide
V1R22026-02-251 of 30 findings match
Symantec ProxySG NDM Security Technical Implementation Guide
V1R22019-12-201 of 32 findings match
Trend Micro TippingPoint IDPS Security Technical Implementation Guide
V2R22024-09-161 of 30 findings match
Trend Micro TippingPoint NDM Security Technical Implementation Guide
V2R32025-03-101 of 30 findings match

Database

25 STIGs
MS SQL Server 2016 Instance Security Technical Implementation Guide
32025-06-1121 of 101 findings match
Microsoft SQL Server 2022 Instance Security Technical Implementation Guide
V1R42026-02-2519 of 79 findings match
Microsoft SQL Server 2022 Instance Security Technical Implementation Guide
12025-05-3019 of 80 findings match
MS SQL Server 2016 Instance Security Technical Implementation Guide
V3R62025-12-0819 of 84 findings match
Microsoft Azure SQL Managed Instance Security Technical Implementation Guide
V1R12025-10-0711 of 84 findings match
Oracle Database 19c Security Technical Implementation Guide
V1R52026-02-257 of 96 findings match
Oracle Database 19c Security Technical Implementation Guide
12025-06-247 of 96 findings match
Database Security Requirements Guide
V4R52026-02-266 of 142 findings match
Show 17 more STIGs in this category →
Database Security Requirements Guide
42024-12-046 of 142 findings match
EnterpriseDB Postgres Advanced Server (EPAS) Security Technical Implementation Guide
V2R12024-08-276 of 118 findings match
IBM DB2 V10.5 LUW Security Technical Implementation Guide
V2R12023-06-116 of 93 findings match
Crunchy Data Postgres 16 Security Technical Implementation Guide
V1R22026-02-275 of 111 findings match
Crunchy Data Postgres 16 Security Technical Implementation Guide
12024-06-175 of 111 findings match
Crunchy Data PostgreSQL Security Technical Implementation Guide
V3R12024-08-275 of 113 findings match
MariaDB Enterprise 10.x Security Technical Implementation Guide
V2R52026-03-025 of 107 findings match
MariaDB Enterprise 10.x Security Technical Implementation Guide
22024-12-055 of 110 findings match
Oracle MySQL 8.0 Security Technical Implementation Guide
V2R22024-09-045 of 100 findings match
Redis Enterprise 6.x Security Technical Implementation Guide
V2R22024-09-045 of 71 findings match
MarkLogic Server v9 Security Technical Implementation Guide
V3R22024-09-044 of 80 findings match
Microsoft Azure SQL Database Security Technical Implementation Guide
V2R32025-06-114 of 76 findings match
MongoDB Enterprise Advanced 8.x Security Technical Implementation Guide
V1R12026-02-204 of 55 findings match
MongoDB Enterprise Advanced 7.x Security Technical Implementation Guide
V1R12024-09-272 of 50 findings match
VMware vSphere 8.0 vCenter Appliance PostgreSQL Security Technical Implementation Guide
V2R22025-02-122 of 18 findings match
VMware vSphere 8.0 vCenter Appliance PostgreSQL Security Technical Implementation Guide
V1R12023-10-292 of 20 findings match
VMware vSphere 7.0 vCenter Appliance PostgreSQL Security Technical Implementation Guide
V1R22023-06-151 of 20 findings match

Web / Application Server

33 STIGs
Adobe ColdFusion Security Technical Implementation Guide
V1R12025-12-1915 of 84 findings match
Web Server Security Requirements Guide
V4R42025-09-1014 of 126 findings match
Web Server Security Requirements Guide
42025-02-1214 of 124 findings match
Apache Tomcat Application Server 9 Security Technical Implementation Guide
V3R42026-02-2512 of 79 findings match
Apache Tomcat Application Server 9 Security Technical Implementation Guide
32025-02-1112 of 82 findings match
Microsoft IIS 10.0 Server Security Technical Implementation Guide
V3R72026-02-2612 of 40 findings match
Microsoft IIS 10.0 Server Security Technical Implementation Guide
32025-06-1112 of 43 findings match
Apache Server 2.4 UNIX Server Security Technical Implementation Guide
V3R22024-12-049 of 47 findings match
Show 25 more STIGs in this category →
Apache Server 2.4 UNIX Server Security Technical Implementation Guide
32024-12-049 of 47 findings match
Apache Server 2.4 Windows Server Security Technical Implementation Guide
V3R42026-02-259 of 49 findings match
Apache Server 2.4 Windows Server Security Technical Implementation Guide
32025-02-129 of 54 findings match
JBoss Enterprise Application Platform 6.3 Security Technical Implementation Guide
V2R62025-02-208 of 67 findings match
Microsoft IIS 10.0 Site Security Technical Implementation Guide
V2R152026-02-268 of 44 findings match
Microsoft IIS 10.0 Site Security Technical Implementation Guide
22025-06-098 of 43 findings match
IBM WebSphere Traditional V9.x Security Technical Implementation Guide
V2R12026-02-267 of 77 findings match
IBM WebSphere Traditional V9.x Security Technical Implementation Guide
12018-08-247 of 76 findings match
Red Hat Ansible Automation Controller Web Server Security Technical Implementation Guide
V2R32025-11-207 of 28 findings match
Red Hat Ansible Automation Controller Web Server Security Technical Implementation Guide
22024-08-277 of 28 findings match
Apache Server 2.4 UNIX Site Security Technical Implementation Guide
V2R62025-02-126 of 27 findings match
Apache Server 2.4 Windows Site Security Technical Implementation Guide
22025-02-126 of 36 findings match
Application Security and Development Security Technical Implementation Guide
62025-02-126 of 286 findings match
Application Security and Development Security Technical Implementation Guide
V6R42025-09-096 of 286 findings match
Microsoft Exchange 2016 Mailbox Server Security Technical Implementation Guide
V2R62023-12-185 of 64 findings match
Microsoft Exchange 2019 Mailbox Server Security Technical Implementation Guide
V2R32025-05-145 of 66 findings match
Apache Server 2.4 Windows Site Security Technical Implementation Guide
V2R32026-02-254 of 16 findings match
Application Programming Interface (API) Security Requirements Guide
V1R12025-09-243 of 65 findings match
Microsoft Exchange 2016 Edge Transport Server Security Technical Implementation Guide
V2R62024-12-063 of 68 findings match
Microsoft Exchange 2019 Edge Server Security Technical Implementation Guide
V2R22024-12-063 of 68 findings match
Application Server Security Requirements Guide
V4R42025-09-102 of 137 findings match
Application Server Security Requirements Guide
42025-02-112 of 128 findings match
HPE 3PAR SSMC Web Server Security Technical Implementation Guide
V2R12024-05-301 of 19 findings match
IBM WebSphere Liberty Server Security Technical Implementation Guide
22025-02-111 of 29 findings match
IBM WebSphere Liberty Server Security Technical Implementation Guide
V2R42026-02-261 of 30 findings match

Virtualization / Container

46 STIGs
Mirantis Kubernetes Engine Security Technical Implementation Guide
V2R12024-08-2718 of 44 findings match
Nutanix Acropolis GPOS Security Technical Implementation Guide
V1R12026-02-2417 of 106 findings match
VMware vSphere 8.0 vCenter Appliance ESX Agent Manager (EAM) Security Technical Implementation Guide
V1R12023-10-2913 of 34 findings match
VMware vSphere 8.0 vCenter Appliance ESX Agent Manager (EAM) Security Technical Implementation Guide
V2R22024-12-1613 of 34 findings match
VMware vSphere 8.0 vCenter Appliance Lookup Service Security Technical Implementation Guide
V1R12023-10-2913 of 34 findings match
VMware vSphere 8.0 vCenter Appliance Lookup Service Security Technical Implementation Guide
V2R12024-07-1113 of 34 findings match
VMware vSphere 8.0 vCenter Appliance Secure Token Service (STS) Security Technical Implementation Guide
V2R12024-07-1113 of 33 findings match
VMware vSphere 8.0 vCenter Appliance User Interface (UI) Security Technical Implementation Guide
V2R12024-07-1113 of 33 findings match
Show 38 more STIGs in this category →
VMware vSphere 8.0 vCenter Appliance User Interface (UI) Security Technical Implementation Guide
V1R12023-10-2913 of 33 findings match
VMware vSphere 8.0 vCenter Appliance Perfcharts Security Technical Implementation Guide
V2R12024-07-1112 of 33 findings match
VMware vSphere 8.0 vCenter Appliance Perfcharts Security Technical Implementation Guide
V1R12023-10-2912 of 33 findings match
VMware vSphere 8.0 vCenter Appliance Secure Token Service (STS) Security Technical Implementation Guide
V1R12023-10-2912 of 33 findings match
VMware vSphere 7.0 vCenter Appliance EAM Security Technical Implementation Guide
V1R22023-06-159 of 33 findings match
VMware vSphere 7.0 vCenter Appliance STS Security Technical Implementation Guide
V1R22023-06-159 of 31 findings match
Container Platform Security Requirements Guide
V2R42025-09-108 of 188 findings match
Container Platform Security Requirements Guide
22025-05-158 of 187 findings match
VMware vSphere 7.0 vCenter Appliance Lookup Service Security Technical Implementation Guide
V1R22023-06-158 of 31 findings match
VMware vSphere 7.0 vCenter Appliance Perfcharts Security Technical Implementation Guide
V1R12023-02-218 of 34 findings match
VMware vSphere 7.0 vCenter Appliance UI Security Technical Implementation Guide
V1R22023-06-158 of 33 findings match
Red Hat OpenShift Container Platform 4.x Security Technical Implementation Guide
22025-05-157 of 83 findings match
Red Hat OpenShift Container Platform 4.x Security Technical Implementation Guide
V2R52025-12-047 of 83 findings match
VMware vSphere 7.0 VAMI Security Technical Implementation Guide
V1R22023-06-157 of 28 findings match
Kubernetes Security Technical Implementation Guide
V2R62026-02-126 of 92 findings match
Kubernetes Security Technical Implementation Guide
22025-05-166 of 94 findings match
Virtual Machine Manager Security Requirements Guide
22024-12-066 of 193 findings match
Virtual Machine Manager Security Requirements Guide
V2R32025-09-106 of 198 findings match
VMware NSX-T Manager NDM Security Technical Implementation Guide
V1R32023-06-226 of 23 findings match
VMware vSphere 8.0 vCenter Appliance Management Interface (VAMI) Security Technical Implementation Guide
V2R12024-07-114 of 22 findings match
VMware vSphere 8.0 vCenter Appliance Management Interface (VAMI) Security Technical Implementation Guide
V1R12023-10-294 of 24 findings match
VMware NSX 4.x Tier-0 Gateway Router Security Technical Implementation Guide
V1R22024-12-133 of 16 findings match
VMware NSX-T Tier-0 Gateway RTR Security Technical Implementation Guide
V1R22022-09-013 of 16 findings match
VMware vSphere 7.0 ESXi Security Technical Implementation Guide
V1R42025-02-113 of 75 findings match
VMware vSphere 8.0 ESXi Security Technical Implementation Guide
V2R32025-02-113 of 76 findings match
VMware vSphere 8.0 ESXi Security Technical Implementation Guide
V1R12023-10-113 of 73 findings match
Rancher Government Solutions RKE2 Security Technical Implementation Guide
V2R62026-02-132 of 21 findings match
Rancher Government Solutions RKE2 Security Technical Implementation Guide
22024-12-202 of 24 findings match
VMware NSX 4.x Tier-1 Gateway Router Security Technical Implementation Guide
V1R22024-12-202 of 4 findings match
VMware NSX-T Tier 1 Gateway RTR Security Technical Implementation Guide
V1R12022-03-092 of 4 findings match
Rancher Government Solutions Multi-Cluster Manager Security Technical Implementation Guide
V2R22025-11-201 of 7 findings match
Rancher Government Solutions Multi-Cluster Manager Security Technical Implementation Guide
22024-08-271 of 7 findings match
VMware vSphere 7.0 vCenter Appliance Photon OS Security Technical Implementation Guide
V1R42024-12-161 of 113 findings match
VMware vSphere 7.0 vCenter Security Technical Implementation Guide
V1R32023-12-211 of 57 findings match
VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 Security Technical Implementation Guide
V2R12024-07-111 of 106 findings match
VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 Security Technical Implementation Guide
V1R12023-10-291 of 104 findings match
VMware vSphere 8.0 vCenter Security Technical Implementation Guide
V1R12023-10-111 of 65 findings match
VMware vSphere 8.0 vCenter Security Technical Implementation Guide
V2R32025-06-091 of 67 findings match

Endpoint Security Management

27 STIGs
Trellix Application Control 8.x Security Technical Implementation Guide
V3R22025-06-0921 of 31 findings match
Tanium 7.x Security Technical Implementation Guide
V2R32025-05-1410 of 98 findings match
Tanium 7.x Application on TanOS Security Technical Implementation Guide
V2R22025-02-117 of 75 findings match
BlackBerry UEM Security Technical Implementation Guide
V2R12020-12-044 of 16 findings match
ISEC7 Sphere Security Technical Implementation Guide
V3R12024-08-204 of 34 findings match
Jamf Pro v10.x EMM Security Technical Implementation Guide
V3R12024-08-274 of 29 findings match
Unified Endpoint Management Server Security Requirements Guide
22024-12-094 of 137 findings match
Unified Endpoint Management Server Security Requirements Guide
V2R42025-09-104 of 138 findings match
Show 19 more STIGs in this category →
BlackBerry Enterprise Mobility Server 2.x Security Technical Implementation Guide
V1R32020-05-153 of 23 findings match
BlackBerry Enterprise Mobility Server 3.x Security Technical Implementation Guide
V1R22023-05-173 of 27 findings match
IBM MaaS360 with Watson v10.x MDM Security Technical Implementation Guide
V1R22019-08-063 of 12 findings match
Intrusion Detection and Prevention Systems Security Requirements Guide
32025-05-193 of 58 findings match
Intrusion Detection and Prevention Systems Security Requirements Guide
V3R42025-09-223 of 60 findings match
Microsoft Windows Defender Firewall with Advanced Security Security Technical Implementation Guide
V2R22023-08-233 of 21 findings match
MobileIron Core v10.x MDM Security Technical Implementation Guide
V1R12019-02-193 of 11 findings match
Samsung SDS EMM Security Technical Implementation Guide
V1R32022-06-103 of 23 findings match
Forescout Network Device Management Security Technical Implementation Guide
V2R32025-06-122 of 42 findings match
Arctic Wolf CylanceON-PREM Security Technical Implementation Guide
V1R12025-06-111 of 16 findings match
Axonius Federal Systems Ax-OS Security Technical Implementation Guide
V1R22025-11-251 of 16 findings match
Central Log Server Security Requirements Guide
V3R42026-02-121 of 127 findings match
Central Log Server Security Requirements Guide
32024-12-041 of 125 findings match
Dragos Platform 2.x Security Technical Implementation Guide
V1R62026-02-181 of 19 findings match
Dragos Platform 2.x Security Technical Implementation Guide
12025-05-151 of 19 findings match
HYCU Protege Security Technical Implementation Guide
V1R22026-03-041 of 55 findings match
HYCU Protege Security Technical Implementation Guide
12024-10-291 of 55 findings match
Xylok Security Suite 20.x Security Technical Implementation Guide
V1R22025-12-041 of 19 findings match
Xylok Security Suite 20.x Security Technical Implementation Guide
12024-12-131 of 19 findings match

Productivity Application

14 STIGs
Microsoft Edge Security Technical Implementation Guide
V2R52026-02-2549 of 61 findings match
Microsoft Edge Security Technical Implementation Guide
22025-05-1547 of 59 findings match
Mozilla Firefox Security Technical Implementation Guide
V6R72025-11-2527 of 34 findings match
Mozilla Firefox Security Technical Implementation Guide
62025-02-1127 of 34 findings match
Google Chrome Current Windows Security Technical Implementation Guide
V2R112025-05-1514 of 46 findings match
Adobe Acrobat Professional DC Continuous Track Security Technical Implementation Guide
V2R12021-06-2212 of 23 findings match
Adobe Acrobat Reader DC Continuous Track Security Technical Implementation Guide
V2R12021-06-2211 of 26 findings match
Microsoft Office 365 ProPlus Security Technical Implementation Guide
V3R52026-02-128 of 139 findings match
Show 6 more STIGs in this category →
Microsoft Office 365 ProPlus Security Technical Implementation Guide
32025-03-057 of 138 findings match
AvePoint Compliance Guardian Security Technical Implementation Guide
V1R12023-02-211 of 10 findings match
AvePoint DocAve 6 Security Technical Implementation Guide
V1R22022-08-241 of 9 findings match
Microsoft DotNet Framework 4.0 Security Technical Implementation Guide
V2R82026-02-121 of 16 findings match
Microsoft DotNet Framework 4.0 Security Technical Implementation Guide
22025-05-161 of 16 findings match
Soaring Software Solutions TCMax 9.x Security Technical Implementation Guide
V1R12026-03-051 of 17 findings match

Uncategorized

11 STIGs
Microsoft Internet Explorer 11 Security Technical Implementation Guide
22023-12-0155 of 137 findings match
Microsoft Excel 2016 Security Technical Implementation Guide
22024-02-213 of 41 findings match
Microsoft Outlook 2016 Security Technical Implementation Guide
22022-03-113 of 63 findings match
Microsoft PowerPoint 2016 Security Technical Implementation Guide
12016-11-023 of 37 findings match
Microsoft Word 2016 Security Technical Implementation Guide
12016-11-023 of 34 findings match
Microsoft Access 2016 Security Technical Implementation Guide
12016-11-022 of 16 findings match
Microsoft Office System 2016 Security Technical Implementation Guide
22024-12-061 of 20 findings match
Microsoft Project 2016 Security Technical Implementation Guide
12016-11-021 of 14 findings match
Show 3 more STIGs in this category →
Microsoft Publisher 2016 Security Technical Implementation Guide
12018-03-191 of 15 findings match
Microsoft SharePoint 2013 Security Technical Implementation Guide
22024-12-101 of 37 findings match
Microsoft Visio 2016 Security Technical Implementation Guide
12016-11-021 of 13 findings match